S&P Global has agreed to acquire smart contract security company OpenZeppelin, bringing one of blockchain’s most widely used security platforms under the same financial giant behind S&P Global Ratings and major market benchmarks. The acquisition will expand S&P Global’s digital-asset business into smart contract and blockchain technology risk as traditional financial institutions increasingly move stablecoins, tokenized funds and other financial products onchain. Financial terms were not disclosed.
OpenZeppelin Technology Has Secured $37 Trillion in Transfers
Founded in 2015, OpenZeppelin is best known for its open-source smart contract libraries used by developers to build blockchain applications.
According to S&P Global, contracts using OpenZeppelin’s technology have supported more than $37 trillion in value transferred across blockchain networks. Its software is used throughout major stablecoins, tokenized funds, DeFi protocols and other onchain financial products.
The company has also completed more than 900 security engagements and says its work has identified over 10,000 vulnerabilities before affected code reached production.
S&P Wants to Rate More Than Financial Risk
The acquisition gives S&P Global another layer of risk information as traditional financial products move onto blockchains.
A tokenized fund could have strong underlying assets and financial backing but still face vulnerabilities in the smart contracts controlling how those assets are issued, transferred or managed.
Combining OpenZeppelin’s blockchain security expertise with S&P Global’s existing data, benchmarks and risk-assessment business could allow the company to develop new onchain security assessments and benchmarks for institutional investors and financial companies.
OpenZeppelin Will Remain Independent
OpenZeppelin isn’t disappearing following the acquisition.
The company will continue operating under the OpenZeppelin name as its own business unit, while co-founder and CEO Demian Brener will remain in charge and report to S&P Global Ratings President Yann Le Pallec.
Its open-source smart contract tools are also expected to remain available while the company continues providing security assessments and development services.
Traditional Finance Needs Blockchain Security
The deal arrives as financial institutions rapidly expand into stablecoins, tokenized securities and blockchain-based settlement.
That transition creates a new category of risk. Institutions not only have to evaluate credit, liquidity and counterparty exposure, but also whether the underlying blockchain infrastructure and smart contracts are secure.
S&P Global says acquiring OpenZeppelin will extend its risk-assessment capabilities directly into that onchain technology layer while giving OpenZeppelin access to S&P Global’s global institutional relationships and distribution.
Wall Street’s Onchain Infrastructure Keeps Growing
The acquisition fits into a broader institutional shift occurring throughout 2026. Banks, asset managers, payment companies and market infrastructure providers are increasingly moving beyond simply offering crypto exposure and are beginning to build or acquire the infrastructure supporting tokenized markets.
For S&P Global, OpenZeppelin provides expertise in one of the most important pieces of that infrastructure: determining whether the code controlling billions of dollars in digital assets is secure.
With OpenZeppelin’s technology already embedded throughout stablecoins, tokenized funds and DeFi, the acquisition gives S&P Global a direct role in the security layer underneath the growing onchain financial system.
